GRCLibrary.ai

Annex

Peru Privacy Regulatory Requirements

This annex defines the privacy regulatory requirements applicable to the processing (tratamiento) of personal data in Peru under Ley Nº 29733, Ley de Protección de Datos Personales, and its regulation, Decreto Supremo Nº 016-2024-JUS. It supplements the Privacy and Data Governance Policy and the Privacy Impact and Cross-Border Transfer Procedure. Ley 29733 applies to personal data contained in, or destined for, public- and private-administration data banks (bancos de datos personales) processed in the national territory, with sensitive data an object of special protection [Ley Art 3].

Type
Annex
Version
0.0.3
Date
2026-09-24
Owner
Data Protection Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Privacy
Review frequency
Annual and upon material privacy or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicable law and regulatory authority
  • Principles, lawful basis, and consent
  • Data-subject rights
  • Cross-border transfers
  • Database registration and accountability
  • Security and breach
  • Enforcement and penalties
  • Employment and workforce monitoring
  • Limitations

Related documents